This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json) Hash identifier: XRw9PtlODWDEAbZcxCHbpsq9Q72hFbF6ZxmMOMolKEo= Subject key identifier: C3:F4:21:F8:0D:68:E5:36:CC:20:7C:D7:BB:87:20:F5:47:87:2D:AD Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019AF2094A7080A9AA13B864D8F3C5556D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft Manifest number: 0D7D Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: REPOw149mODWNiaUKef3JQas7O0.roa (hash: iyQwZYLXGMmlpdToH0d9XmPw4cuKdZskqJ2oxIivdzA=) 2: rndMlM-Kmotx4ZTMDFABZDqeWXo.roa (hash: FbnOY8Bh8pIyTC0Uqy9f/1TBfdxIcNvVYwe7iz7GTqs=) 3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: j7U6xfllScQEE+AISXPLgoSK4Kov+i0t10v0vz8JI3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4a:70:80:a9:aa:13:b8:64:d8:f3:c5:55:6d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=c3f421f80d68e536cc207cd7bb8720f547872dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:64:b7:f2:91:28:92:3b:8e:0f:03:f2:a2: 68:d2:88:4a:f1:69:67:5f:91:16:bf:62:b4:d1:7d: 33:85:04:38:96:7d:f4:0a:88:2b:00:2b:2e:f6:4b: 12:5e:1e:8a:4a:eb:28:2b:9d:bb:d8:82:d1:c4:d9: 31:85:6c:4e:00:f2:12:66:b0:a0:be:b8:7d:52:3d: dd:cb:aa:f8:38:b2:4e:92:6b:4d:e7:af:78:9d:dd: aa:d2:1d:5c:4e:f9:88:50:52:ab:6e:89:16:39:2a: fc:27:d3:8a:4a:fd:2c:b1:39:3f:59:04:b5:94:9f: a4:fa:c5:96:0d:ee:2b:11:02:0d:a1:65:40:7a:34: 2e:04:3a:04:32:76:0a:7f:b3:21:c4:73:e9:e5:4a: 9b:d2:51:5b:7f:f7:27:56:be:f8:2f:ba:08:a6:e6: 02:51:ea:d0:6e:62:dd:4d:d4:03:6c:af:56:05:ea: 91:c8:78:0d:7e:fd:47:6d:1e:55:2f:72:4c:ca:d0: 92:92:30:41:4b:28:58:49:7c:a1:7a:02:00:20:4f: 2d:52:d0:7e:09:7f:c1:59:16:7f:84:bd:d7:cd:de: 08:1c:4d:a1:31:72:a9:a9:34:a5:32:e8:da:b7:61: 0c:fb:d4:27:04:1e:b4:e0:2d:28:28:27:3a:0f:9e: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F4:21:F8:0D:68:E5:36:CC:20:7C:D7:BB:87:20:F5:47:87:2D:AD X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:70:3a:b9:cc:7d:45:c3:d7:58:b4:b1:c2:4f:6f:7b:b3:42: 23:0f:93:c5:b7:dc:88:22:1b:20:17:a7:d1:14:e2:42:65:d7: ec:6d:e2:f2:b6:21:2c:9a:48:c6:99:fd:7c:5e:cc:eb:43:93: 56:f9:34:86:61:f8:c1:87:05:b7:b6:7b:2e:b9:4d:42:cc:c6: cf:79:79:9d:05:fd:0e:b5:37:3a:24:aa:da:5a:55:fa:64:2c: 88:ec:e7:f8:4e:8b:03:56:2e:fb:17:32:cd:6b:4b:82:fa:af: 4d:c0:52:3a:d1:ba:1e:7d:5c:ba:84:1b:16:83:6f:07:85:73: 28:07:26:a6:c7:ca:59:7a:b8:bf:23:48:9e:f9:b0:15:8f:cf: 1e:d5:b7:ef:97:5c:7a:2a:95:3f:9c:0d:e4:8e:44:d5:94:14: 66:6d:64:93:dc:6a:49:65:a6:8e:11:ad:d1:72:77:f6:c2:53: 84:88:fd:d3:ec:50:df:9b:e2:67:21:82:0b:f4:6b:64:72:19: 26:67:ef:5b:14:bd:55:2e:28:18:4a:e0:5d:c5:9f:05:34:9c: 6f:6d:14:3d:9b:34:7f:c1:87:c7:2d:ff:8d:ff:bd:fb:f2:2e: 27:d4:c9:67:d2:bf:b2:a3:0e:e5:7d:d4:b5:be:fe:08:95:26: e1:ff:82:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUpwgKmqE7hk2PPFVW0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EyhjM2Y0MjFmODBkNjhlNTM2Y2MyMDdjZDdiYjg3MjBmNTQ3ODcyZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1pkt/KRKJI7jg8D8qJo0ohK8Wln X5EWv2K00X0zhQQ4ln30CogrACsu9ksSXh6KSusoK5272ILRxNkxhWxOAPISZrCg vrh9Uj3dy6r4OLJOkmtN5694nd2q0h1cTvmIUFKrbokWOSr8J9OKSv0ssTk/WQS1 lJ+k+sWWDe4rEQINoWVAejQuBDoEMnYKf7MhxHPp5Uqb0lFbf/cnVr74L7oIpuYC UerQbmLdTdQDbK9WBeqRyHgNfv1HbR5VL3JMytCSkjBBSyhYSXyhegIAIE8tUtB+ CX/BWRZ/hL3Xzd4IHE2hMXKpqTSlMujat2EM+9QnBB604C0oKCc6D55nswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP0IfgNaOU2zCB817uHIPVHhy2tMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnA6ucx9 RcPXWLSxwk9ve7NCIw+TxbfciCIbIBen0RTiQmXX7G3i8rYhLJpIxpn9fF7M60OT Vvk0hmH4wYcFt7Z7LrlNQszGz3l5nQX9DrU3OiSq2lpV+mQsiOzn+E6LA1Yu+xcy zWtLgvqvTcBSOtG6Hn1cuoQbFoNvB4VzKAcmpsfKWXq4vyNInvmwFY/PHtW375dc eiqVP5wN5I5E1ZQUZm1kk9xqSWWmjhGt0XJ39sJThIj90+xQ35viZyGCC/RrZHIZ JmfvWxS9VS4oGErgXcWfBTScb20UPZs0f8GHxy3/jf+9+/IuJ9TJZ9K/sqMO5X3U tb7+CJUm4f+C9g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:42 2025 by rpki-client